Misleading Deep-Fake Detection with GAN Fingerprints

05/25/2022
by   Vera Wesselkamp, et al.
0

Generative adversarial networks (GANs) have made remarkable progress in synthesizing realistic-looking images that effectively outsmart even humans. Although several detection methods can recognize these deep fakes by checking for image artifacts from the generation process, multiple counterattacks have demonstrated their limitations. These attacks, however, still require certain conditions to hold, such as interacting with the detection method or adjusting the GAN directly. In this paper, we introduce a novel class of simple counterattacks that overcomes these limitations. In particular, we show that an adversary can remove indicative artifacts, the GAN fingerprint, directly from the frequency spectrum of a generated image. We explore different realizations of this removal, ranging from filtering high frequencies to more nuanced frequency-peak cleansing. We evaluate the performance of our attack with different detection methods, GAN architectures, and datasets. Our results show that an adversary can often remove GAN fingerprints and thus evade the detection of generated images.

READ FULL TEXT

page 1

page 2

page 4

page 5

research
06/13/2020

FakePolisher: Making DeepFakes More Detection-Evasive by Shallow Reconstruction

The recently rapid advances of generative adversarial networks (GANs) in...
research
03/19/2020

Leveraging Frequency Analysis for Deep Fake Image Recognition

Deep neural networks can generate images that are astonishingly realisti...
research
11/13/2019

Real or Fake? Spoofing State-Of-The-Art Face Synthesis Detection Systems

The availability of large-scale facial databases, together with the rema...
research
08/10/2020

T-GD: Transferable GAN-generated Images Detection Framework

Recent advancements in Generative Adversarial Networks (GANs) enable the...
research
10/06/2020

BAAAN: Backdoor Attacks Against Autoencoder and GAN-Based Machine Learning Models

The tremendous progress of autoencoders and generative adversarial netwo...
research
09/19/2020

FakeRetouch: Evading DeepFakes Detection via the Guidance of Deliberate Noise

The novelty and creativity of DeepFake generation techniques have attrac...
research
09/22/2020

A Generative Adversarial Approach with Residual Learning for Dust and Scratches Artifacts Removal

Retouching can significantly elevate the visual appeal of photos, but ma...

Please sign up or login with your details

Forgot password? Click here to reset